More cameras leak footage, Avast is fined for selling user data, a vending machine quietly scans students’ faces, using a small NVMe drive with ZFS, and taking snapshots of VMs.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

“So violated”: Wyze cameras leak footage to strangers for 2nd time in 5 months

Avast fined $16.5 million for ‘privacy’ software that actually sold users’ browsing data

Vending machine error reveals secret face image database of college students

Free Consulting

We were asked about using a small NVMe drive with ZFS, and taking snapshots of VMs.

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.

Why it’s not a great idea to install Windows 11 on unsupported hardware, quantum computing hype has been replaced by AI, toothbrushes can’t be part of a botnet, Google has killed cached search results, and testing your backups.

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

Windows 11 24H2 goes from “unsupported” to “unbootable” on some older PCs

Investors threw 50% less money at quantum sector last year

Viral news story of botnet with 3 million toothbrushes was too good to be true

Google has killed cached results in search

Free Consulting

We were asked about testing your backups.

Kolide

Kolide ensures that if a device isn’t secure it can’t access your apps.  It’s Device Trust for Okta. Visit kolide.com/25a to learn more.

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.

Nginx is forked, Broadcom/VMware kills ESXi, dedup is finally fixed in ZFS, using multiple network interfaces on a NAS, and more.

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

announcing freenginx.org

Broadcom-owned VMware kills the free version of ESXi virtualization software

OpenZFS Native Encryption Use Raises Data Corruption Concerns

Fast Dedup is a Valentines Gift to the OpenZFS and TrueNAS Communities

Free Consulting

We were asked about using multiple network interfaces on a NAS.

Kolide

Kolide ensures that if a device isn’t secure it can’t access your apps.  It’s Device Trust for Okta. Visit kolide.com/25a to learn more.

See our contact page for ways to get in touch.

Trying to report a security issue lands a consultant in trouble, a new take on the drop shipping scam, setting up your first NAS – including the benefits of RAID, picking a distro, choosing the right disk size, and more.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

IT consultant in Germany fined for exposing shoddy security

Canadian Man Stuck in Triangle of E-Commerce Fraud

ICANN proposes creating .INTERNAL domain

Free Consulting

We were asked about setting up your first NAS – including the benefits of RAID, picking a distro, and choosing the right disk size.

Building Your Own FreeBSD-based NAS with ZFS

Part 2: Tuning Your FreeBSD Configuration for Your NAS

3.5″ internal drives sorted by price/TB

See our contact page for ways to get in touch.

Microsoft’s rudimentary error that allowed an attacker access to its executives’ emails, Pixel phones have another serious storage bug, hidden malware payload found at Ars Technica, and when to upgrade your hardware for Windows 11.

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

BSDCan 2024 – Call for papers

News

In major gaffe, hacked Microsoft test account was assigned admin privileges

Pixel phones are broken again with critical storage permission bug

Ars Technica used in malware campaign with never-before-seen obfuscation

Free Consulting

We were asked about when to upgrade your hardware for Windows 11.

See our contact page for ways to get in touch.

Y2K was a pretty serious problem and 2038 is coming soon, work on Arm servers is improving the experience on the desktop, and what to do with an old unsupported Synology NAS.

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

OpenZFS Best Practices: Part 2: File Serving and SANs

News/discussion

The ‘nothing-happened’ Y2K bug – and how IT squashed it

What I learned from using a Raspberry Pi 5 as my main computer for two weeks

Free Consulting

We were asked about what to do with an old unsupported Synology NAS.

Xpenology

How can I use a PC to recover data when my Synology NAS malfunctions?

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.

Hard drives are pretty much an enterprise product now, GitHub’s malware problem, and spreading services across different machines and VMs to keep downtime to a minimum.

Plugs

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

OpenZFS Storage Best Practices and Use Cases Part 1: Snapshots and Backups

News

Hard disk drives are next in line to become mostly enterprise hardware — as Nvidia (and AMD) could be planning to focus on AI, leaving consumers as second-class citizens

Seagate unveils 30 TB+ Exos HAMR disk drives – Blocks and Files

Miscreants absolutely love using GitHub to sling malware

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure

Free Consulting

We were asked about spreading services across different machines and VMs to keep downtime to a minimum.

Kolide

Kolide ensures that if a device isn’t secure it can’t access your apps.  It’s Device Trust for Okta. Visit kolide.com/25a to learn more.

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.

Why the problems with open source licenses aren’t quite as easy to fix as some people think, the reasons you should never pay ransomware gangs, and running a Nagios distro on a Raspberry Pi.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News/discussion

What comes after open source? Bruce Perens is working on it

A tale of 2 casino ransomware attacks: One paid out, one did not

The State of Ransomware in the U.S.: Report and Statistics 2023

Free Consulting

We were asked about running a Nagios distro on a Raspberry Pi.

NEMS Linux

Automox

Check out the brand new Autonomous IT podcast. Listen in as a variety of experts in the IT Operations space discuss the latest Patch Tuesday releases, mitigation tips, and custom automations to help with CVE remediations. Listen now on Spotify, Apple, or wherever you get your podcasts.

See our contact page for ways to get in touch.

What does “incognito mode” in Chrome actually mean and whether documenting browser standards in code is a good idea, the serious implications of a fun story about messing with a ChatGPT instance, and maximizing performance when using mixed disk types on ZFS mirrored vdevs.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

Google agrees to settle Chrome incognito mode class action lawsuit

I’d Buy That for a Dollar: Chevy Dealership’s AI Chatbot Goes Rogue

Free Consulting

We were asked about maximizing performance when using mixed disk types on ZFS mirrored vdevs.

See our contact page for ways to get in touch.

Twitch pulls out of Korea thanks to the opposite of Net Neutrality, it’s not clear to what extent smart devices are listening to your conversations, more on water usage in data centers, and our thoughts on mandatory access controls.

Plug

Support us on patreon and get an ad-free RSS feed with early episodes sometimes

News

Twitch to shut down in Korea over ‘prohibitively expensive’ network fees

Marketer sparks panic with claims it uses smart devices to eavesdrop on people

Free Consulting

We were asked for our thoughts on mandatory access controls.

Kolide

Kolide ensures that if a device isn’t secure, it can’t access your apps. It’s Device Trust for Okta. Watch the demo today to see how it works at kolide.com/25a

See our contact page for ways to get in touch.